Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 28 Jan 2005 22:55:25 +0100 (CET)
From:      Xavier Beaudouin <kiwi@oav.net>
To:        FreeBSD-gnats-submit@FreeBSD.org
Subject:   ports/76799: mail/clamav is out of date -> needs to be updated to 0.81
Message-ID:  <20050128215525.A65744505C@mail01.oav.net>
Resent-Message-ID: <200501282200.j0SM0d4P022019@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         76799
>Category:       ports
>Synopsis:       mail/clamav is out of date -> needs to be updated to 0.81
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Fri Jan 28 22:00:38 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator:     Xavier Beaudouin
>Release:        FreeBSD 5.2.1-RELEASE-p8 i386
>Organization:
Association Kazar
>Environment:
System: FreeBSD mail01.oav.net 5.2.1-RELEASE-p8 FreeBSD 5.2.1-RELEASE-p8 #0: Fri Jun 18 21:08:16 CEST 2004 root@mail01.home.oav.net:/usr/src/sys/i386/compile/MAIL01 i386


	
>Description:

	Ports mail/clamav is still on 0.80.

Freshclam and clamd complains about that :

# freshclam
ClamAV update process started at Fri Jan 28 22:50:58 2005
WARNING: Your ClamAV installation is OUTDATED - please update immediately!
WARNING: Local version: 0.80 Recommended version: 0.81
main.cvd is up to date (version: 29, sigs: 29086, f-level: 3, builder: tomek)
daily.cvd is up to date (version: 690, sigs: 802, f-level: 4, builder: trog)
WARNING: Your ClamAV installation is OUTDATED - please update immediately!
WARNING: Current functionality level = 3, required = 4

0.81 seems to be released 2005/01/26 :

Dear ClamAV users,

release 0.81 is now available for download.
Scan engine improvements were made. The internal mail scanner now
supports multipart/partial messages, and support for decoding non-standard 
mail files was greatly enhanced. clamav-milter by default uses libclamav 
and scans emails itself without the use of clamd. libclamav can now extract 
RFC2397 encoded data within HTML documents, block zip archives with modified 
information in local header, and scan HQX files. PE file structure rebuilding 
from compressed executables was improved.

Important note to clamdwatch users: please upgrade to the latest version
(contrib/clamdwatch) as soon as possible.


Here is a short summary of the ChangeLog:

-) libclamav:
    + major improvements in the mail scanning engine:
	o support for multipart/partial messages
	o improved support for non-standard quoted-printable attachments
	o in some situations it will try to guess a correct mode (e.g.
	  a good type for an incorrect content-type, a best guess for an
	  unknown encoding type, etc.)
	o handling of RFC822 comments in the commands (e.g.: Co(foo)ntent-Type:
	  text/plain)
	o better recovery if memory softlimit is hit
	o new test code that decodes emails without parsing them first (must
	  be enabled manually before compilation)

    + support for extracting RFC2397 encoded data within HTML documents
    + blocking of zip archives with modified information in local header
    + improved PE structure rebuilding from compressed executables
    + improved support for zip archives
    + support for Mac's HQX file format
    + stability and (minor) security fixes
    + a lot of minor improvements, including support for new platforms

-) clamd:
    + new directive ExitOnOOM (stop the deamon when libclamav reports an out of
      memory condition)
    + new directives StreamMinPort and StreamMaxPort (port range specification
      for a stream mode)
    + support for passing of file descriptors

-) clamdscan:
    + added support for --move and --remove

-) clamav-milter:
    + by default uses libclamav to scan e-mails
    + new option --external (enables the use of clamd)
    + various optimisations

-) freshclam:
    + the DNS mode is now enabled by default (no need for DNSDatabaseInfo in
      freshclam.conf)
    + --no-dns uses a If-Modified-Since method instead of a range GET
    + added support for AllowSupplementaryGroups

-) sigtool:
    + new options --vba and --vba-hex (extract VBA/Word6 macros and optionally
      display the corresponding hex values; Word6 binary code will be
      disassembled)




>How-To-Repeat:

cd /usr/ports/mail/clamav && make install clean && freshclam

>Fix:

Upgrade to clamav 0.81 as soon as possible

>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050128215525.A65744505C>